Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America and Asia-Pacific: 1,838 cases from 37 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by topicWho?
by company- Infinite Styles Services Co. Limited (Shein) €150m 88 % · 1 case
- Anonymised companies €7.96m 5 % · 6 cases
- Einzelhandelskette mit Kundenprogramm (anonymisiert) €3.5m 2 % · 1 case
- Centros Comerciales Carrefour, S.A. €3.2m 2 % · 1 case
- Elkjøp Nordic AS, Elkjøp Norge AS €1.85m 1 % · 1 case
- Sprinter Megacentros del Deporte, S.L. €1.56m 1 % · 1 case
- Tractor Supply Company €1.16m 1 % · 1 case
- Verkkokauppa.com Oyj €792,639 0 % · 1 case
- Todd Snyder, Inc. €304,793 0 % · 1 case
- Elderly Aids Limited €221,691 0 % · 1 case
- 16 more€478,531
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 1 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
26 Aug 2025 Kmart Australia LimitedKmart: facial recognition used against refund fraud breached the Privacy Act Order
From June 2020 to July 2022, Kmart Australia used facial recognition in 28 stores to record the face of every person who came in and of every customer at the returns counters, with the aim of uncovering refund fraud, without informing them or obtaining their consent. The Privacy Commissioner rejected the exception for addressing unlawful activity, because the indiscriminate collection of sensitive biometric information was disproportionate given less intrusive alternatives and its limited benefit, and ordered that the conduct must not be continued or repeated. The decision is currently under review before the Administrative Review Tribunal; hearings are scheduled for early 2027. The decision is not final.
Before deploying facial recognition, organisations must assess and document whether less intrusive means would suffice and whether the intrusion into the privacy of everyone captured is proportionate.
Facial recognition in retail: proportionality, notice and consent
- Authority / court
- Office of the Australian Information Commissioner (OAIC)
- Area of law
- Data protection · Video surveillance
- Legal basis
- Privacy Act 1988 (Cth), APP 1.3, 1.4, 3.3, 3.4, 5.1, 5.2
- Action
- Order
- Status of proceedings
- under appeal
- Sector
- Retail and e-commerce
- Mitigating circumstances
- Kmart stopped using the system in July 2022 when the investigation began and cooperated with the regulator throughout.
- Published
- 18 Sep 2025
- OAIC: Kmart’s use of facial recognition to tackle refund fraud unlawful, Privacy Commissioner finds (18.09.2025) Press release of an authority
- OAIC: Privacy determinations – Commissioner Initiated Investigation into Kmart Australia Limited (Privacy) [2025] AICmr 155 (26 August 2025) Enforcement database of an authority
- OAIC: Privacy Commissioner publishes updated guidance on facial recognition in retail spaces (29.07.2026) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link